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1 . (Currently Amended) A data storage device provided with a function for 
authenticating a user's access right, which verifies legitimacy of proof data generated for proving 
a right of an application program to access data stored in a storage medium, to thereby 
authenticate the access right of a user of the application program to the data, the data storage 
device comprising; 

first storage means for storing autlientication data; 

second storage means for storing user unique identifying information of the user of 
the application program; 

third storage means for storing auxiliary proof information being a result in which 
a specific calculation is executed to the user unique identifying information of the application 
program and unique security characteristic information; 

proof data generation means for executing a specific calculation to the 
authentication data stored in the first storage means, the user unique identifying information of 
the application program stored in the second storage means, and the auxiliary proof information 
stored in the third storage means, to thereby generate proof data; 

a data storage main firmne provided with the storage mcdiiun, which stores and 
preserves data in the storage medium; 

command generation means installed in the application program, for generating a 
command that instructs an operation to the data stored in the storage medium of the data storage 
main frame; 

command issuing means installed in the application program, for issuing the 
conmiand generated by the command generation means to the outside of the application 
program; 

proof data verification means for verifying that the proof data generated by the 
proof data generation means has been generated on the basis of the unique security characteristic 
information; and 

command management means for pemiitting to execute the command only when 
the verification is successfixi, as to at least one type of the command thai instructs the operation 
to tlie data stored in the data storage main firame; 

wherein: 

the command is erasing the data stored within the storage medium; and^- 
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, in spite of fee -snv erasins command issued, the data stored within the 

storage medium is preserved. 

47. (Currently Amended) A data storage device provided with a function for 
authenticating a user's access right, which verifies legitimacy of proof data generated for proving 
right of an jipplication program to access data, stored in a storage medium, to thereby 
authenticate the access right of a user of the application program to the data, the data storage 
device comprising: 

first storage means for storing authentication data; 

second storage means for storing user unique identifying information of the 
application program; 

third storage means for storing auxiliary proof information being a result in which 
a specific caJculation is executed to the user unique identifying information of the application 
program and unique security characteristic information; 

proof data generation means for executing a specific calculation to the 
authentication data stored in the first means and the user unique identifying information of the 
application program stored in the second storage means, to thereby generate proof data; 

a data storage main frame provided with a storage medium, which stores and 
preserves data in the storage medium: 

command generation means installed in the application program, for generating a 
command that instructs an operation to the data stored in the storage medium of the data storage 
main frame; 

command issuing means installed in the application program, for issuing a 
command generated by the command generation means to the outside of the application 
program; 

proof data verification means including calculation means for applying a specific 
calculation to the proof data generated by the proof data generation means and the auxiliary 
proof information held in the third storage means, which verifies the proof data to be generated 
on the basis of the user unique identifying information of the application program, by using a 
calculation result by the calculation means; and 

command management means for permitting to execute the conunand only when 
the verification is successful, as to at least one type of the command that instructs the operation 
to the data stored in the data storage main firame; 
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wherein: 

. _the command is erasing the data stored withixi the storage mediurari_and 

, ^in spite of fee- aiiv erasing command issued, the data within the storage 

medium is preserved. 
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